User credential authentication using blockchain and machine learning

Abstract

A method for user credential authentication includes receiving real-time logs from a blockchain network that is configured to perform an authentication process of a user. The real-time logs are normalized and bucketized to generate processed real-time logs, which are stored in a block and are added to a blockchain. The processed real-time logs are analyzed to identify the plurality of real-time behavioral patterns of the user. A first authentication score is determined by comparing a first real-time behavioral pattern to a respective first historical behavioral pattern. The first authentication score is compared to a first authentication score threshold, which corresponds to the first real-time behavioral pattern and the respective first historical behavioral pattern. In response to the first authentication score being less than the first authentication score threshold, a first instruction is sent to the blockchain network to temporarily stop the authentication process of the user.

1 . An apparatus comprising:
 a blockchain network comprising a plurality of nodes, wherein the blockchain network is configured to perform an authentication process of a user;   an authentication monitoring system communicatively coupled to the blockchain network, wherein the authentication monitoring system comprises:
 a memory storing a machine learning algorithm and a database, wherein the database comprises: 
 a blockchain storing historical logs associated with historical authentication events of the user;
 a plurality of historical behavioral patterns of the user, wherein the plurality of historical behavioral patterns are identifiable from the historical logs; and 
 a plurality of authentication score thresholds, wherein each of the plurality of authentication score thresholds corresponds to a respective one of the plurality of historical behavioral patterns; 
 
 a processor communicatively coupled to the memory, wherein the processor, when executing the machine learning algorithm, is configured to:
 receive real-time logs from the blockchain network, wherein the real-time logs are associated with a plurality of real-time behavioral patterns of the user during the authentication process of the user; 
 normalize and bucketize the real-time logs to generate processed real-time logs; 
 store the processed real-time logs in a block; 
 add the block to the blockchain; 
 analyze the processed real-time logs to identify the plurality of real-time behavioral patterns of the user; 
 determine a first authentication score by comparing a first real-time behavioral pattern to a respective first historical behavioral pattern; 
 compare the first authentication score to a first authentication score threshold, wherein the first authentication score threshold corresponds to the first real-time behavioral pattern and the respective first historical behavioral pattern; and 
 in response to the first authentication score being less than the first authentication score threshold, send a first instruction to the blockchain network to temporarily stop the authentication process of the user. 
 
   
     
     
         2 . The apparatus of  claim 1 , wherein the historical behavioral patterns comprise location information of the user, time zone information of the user, authentication frequency information of the user, or authentication time information of the user. 
     
     
         3 . The apparatus of  claim 1 , wherein the processor is further configured to:
 after sending the first instruction to blockchain network to temporarily stop the authentication process of the user, request from the user a confirmation that it is indeed the user who initiated the authentication process;   determine if a response from the user is received or not;   in response to determining that the response is received, determine if the response is positive or negative; and   in response to determining that the response is positive, send a second instruction to the blockchain network to resume the authentication process of the user.   
     
     
         4 . The apparatus of  claim 3 , wherein the processor is further configured to:
 in response to determining that the response is negative, send a third instruction to the blockchain network to terminate the authentication process of the user.   
     
     
         5 . The apparatus of  claim 3 , wherein the processor is further configured to:
 in response to determining that the response is not received, send a third instruction to the blockchain network to terminate the authentication process of the user.   
     
     
         6 . The apparatus of  claim 1 , wherein the processor is further configured to:
 in response to the first authentication score being greater than or equal to the first authentication score threshold, determine a second authentication score by comparing a second real-time behavioral pattern to a respective second historical behavioral pattern;   compare the second authentication score to a second authentication score threshold, wherein the second authentication score threshold corresponds to the second real-time behavioral pattern and the respective second historical behavioral pattern; and   in response to the second authentication score being less than the second authentication score threshold, send a second instruction to the blockchain network to temporarily stop the authentication process of the user.   
     
     
         7 . The apparatus of  claim 1 , wherein the processor is further configured to:
 update the plurality of historical behavioral patterns based on the plurality of real-time behavioral patterns.   
     
     
         8 . A method comprising:
 receiving real-time logs from a blockchain network, wherein the blockchain network is configured to perform an authentication process of a user, and wherein the real-time logs are associated with a plurality of real-time behavioral patterns of the user during the authentication process of the user;   normalizing and bucketizing the real-time logs to generate processed real-time logs;   storing the processed real-time logs in a block;   adding the block to a blockchain;   analyzing the processed real-time logs to identify the plurality of real-time behavioral patterns of the user;   determining a first authentication score by comparing a first real-time behavioral pattern to a respective first historical behavioral pattern;   comparing the first authentication score to a first authentication score threshold, wherein the first authentication score threshold corresponds to the first real-time behavioral pattern and the respective first historical behavioral pattern; and   in response to the first authentication score being less than the first authentication score threshold, sending a first instruction to the blockchain network to temporarily stop the authentication process of the user.   
     
     
         9 . The method of  claim 8 , wherein the historical behavioral patterns comprise location information of the user, time zone information of the user, authentication frequency information of the user, or authentication time information of the user. 
     
     
         10 . The method of  claim 8 , further comprising:
 after sending the first instruction to blockchain network to temporarily stop the authentication process of the user, requesting from the user a confirmation that it is indeed the user who initiated the authentication process;   determining if a response from the user is received or not;   in response to determining that the response is received, determining if the response is positive or negative; and   in response to determining that the response is positive, sending a second instruction to the blockchain network to resume the authentication process of the user.   
     
     
         11 . The method of  claim 10 , further comprising:
 in response to determining that the response is negative, sending a third instruction to the blockchain network to terminate the authentication process of the user.   
     
     
         12 . The method of  claim 10 , further comprising:
 in response to determining that the response is not received, sending a third instruction to the blockchain network to terminate the authentication process of the user.   
     
     
         13 . The method of  claim 8 , further comprising:
 in response to the first authentication score being greater than or equal to the first authentication score threshold, determining a second authentication score by comparing a second real-time behavioral pattern to a respective second historical behavioral pattern;   comparing the second authentication score to a second authentication score threshold, wherein the second authentication score threshold corresponds to the second real-time behavioral pattern and the respective second historical behavioral pattern; and   in response to the second authentication score being less than the second authentication score threshold, sending a second instruction to the blockchain network to temporarily stop the authentication process of the user.   
     
     
         14 . The method of  claim 8 , further comprising:
 updating the plurality of historical behavioral patterns based on the plurality of real-time behavioral patterns.   
     
     
         15 . A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to:
 receive real-time logs from a blockchain network, wherein the blockchain network is configured to perform an authentication process of a user, and wherein the real-time logs are associated with a plurality of real-time behavioral patterns of the user during the authentication process of the user;   normalize and bucketize the real-time logs to generate processed real-time logs;   store the processed real-time logs in a block;   add the block to the blockchain;   analyze the processed real-time logs to identify the plurality of real-time behavioral patterns of the user;   determine a first authentication score by comparing a first real-time behavioral pattern to a respective first historical behavioral pattern;   compare the first authentication score to a first authentication score threshold, wherein the first authentication score threshold corresponds to the first real-time behavioral pattern and the respective first historical behavioral pattern; and   in response to the first authentication score being less than the first authentication score threshold, send a first instruction to the blockchain network to temporarily stop the authentication process of the user.   
     
     
         16 . The non-transitory computer-readable medium of  claim 15 , wherein the historical behavioral patterns comprise location information of the user, time zone information of the user, authentication frequency information of the user, or authentication time information of the user. 
     
     
         17 . The non-transitory computer-readable medium of  claim 15 , wherein the instructions, when executed by the processor, further cause the processor to:
 after sending the first instruction to blockchain network to temporarily stop the authentication process of the user, request from the user a confirmation that it is indeed the user who initiated the authentication process;   determine if a response from the user is received or not;   in response to determining that the response is received, determine if the response is positive or negative; and   in response to determining that the response is positive, send a second instruction to the blockchain network to resume the authentication process of the user.   
     
     
         18 . The non-transitory computer-readable medium of  claim 17 , wherein the instructions, when executed by the processor, further cause the processor to:
 in response to determining that the response is negative, send a third instruction to the blockchain network to terminate the authentication process of the user.   
     
     
         19 . The non-transitory computer-readable medium of  claim 17 , wherein the instructions, when executed by the processor, further cause the processor to:
 in response to determining that the response is not received, send a third instruction to the blockchain network to terminate the authentication process of the user.   
     
     
         20 . The non-transitory computer-readable medium of  claim 15 , wherein the instructions, when executed by the processor, further cause the processor to:
 in response to the first authentication score being greater than or equal to the first authentication score threshold, determine a second authentication score by comparing a second real-time behavioral pattern to a respective second historical behavioral pattern;   compare the second authentication score to a second authentication score threshold, wherein the second authentication score threshold corresponds to the second real-time behavioral pattern and the respective second historical behavioral pattern; and   in response to the second authentication score being less than the second authentication score threshold, send a second instruction to the blockchain network to temporarily stop the authentication process of the user.